mirror of
1
Fork 0
forgejo/services
Gusted 0b17346cff
fix(sec): web route update and delete runner variables
The web route to update and delete variables of runners did not check if
the ID that was given belonged to the context it was requested in, this
made it possible to update and delete every existing runner variable of
a instance for any authenticated user.

The code has been reworked to always take into account the context of
the request (owner and repository ID).
2025-02-08 07:21:14 +00:00
..
actions fix(sec): web route update and delete runner variables 2025-02-08 07:21:14 +00:00
agit
asymkey
attachment
auth [PORT] Remove SHA1 for support for ssh rsa signing (#31857) (#5303) 2025-01-17 03:17:10 +00:00
automerge
context Do not access GitRepo when a repo is being created (#33380) 2025-01-26 11:36:13 +01:00
contexttest
convert chore: Remove `ToSecret` 2025-01-31 14:40:27 +01:00
cron
doctor fix: load settings for valid user and email check (#6674) 2025-01-24 12:23:15 +00:00
externalaccount
f3 fix: f3: label color must start with # 2025-01-07 17:13:21 +01:00
federation
feed feat: add commit limit for webhook payload (#6797) 2025-02-07 19:26:50 +00:00
forgejo
forms chore: Remove `DeadlineForm` 2025-01-31 14:40:27 +01:00
gitdiff Fix parentCommit invalid memory address or nil pointer dereference. (#33204) 2025-01-19 11:52:09 +01:00
indexer
issue demilestone should not include milestone (#32923) 2024-12-28 19:24:24 +00:00
lfs
mailer
markup
migrations feat: implement migration of website field from gogs/gitea/github (#6474) 2025-01-20 12:18:19 +00:00
mirror [gitea] week 2025-04 cherry pick (gitea/main -> forgejo) (#6623) 2025-01-26 08:43:07 +00:00
notify
org
packages chore: teach `set` module about `iter.Seq` (#6676) 2025-01-24 16:45:46 +00:00
pull chore: Remove `IsCommitStatusContextSuccess` 2025-01-31 16:22:29 +01:00
release chore: teach `set` module about `iter.Seq` (#6676) 2025-01-24 16:45:46 +00:00
remote
repository feat: add commit limit for webhook payload (#6797) 2025-02-07 19:26:50 +00:00
secrets
shared/automerge
task
uinotification
user feat: add configurable cooldown to claim usernames (#6422) 2025-01-24 04:16:56 +00:00
webhook feat: add commit limit for webhook payload (#6797) 2025-02-07 19:26:50 +00:00
wiki